libmamba/2024.11.22 package update

[octo-sts[bot]]

[octo-sts[bot]]

Gen AI suggestions to solve the build error:

• Detected Error: "Error: rpc error: code = NotFound desc = federate identity: rpc error: code = NotFound desc = no identity found for (https://accounts.google.com, 109346087047205543085)"

• Error Category: Authentication/Configuration

• Failure Point: Initial build setup when attempting to authenticate with Google accounts

• Root Cause Analysis: The build system is attempting to authenticate with Google accounts for accessing repositories but lacks proper authentication configuration. This is likely related to the presubmit checks configuration.

• Suggested Fix:

1. Add the following to your melange configuration or CI environment:

   environment:
   contents:
   keyring:
     - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
   repositories:
     - https://packages.wolfi.dev/os
     - https://packages.wolfi.dev/bootstrap

2. Remove or update the authentication-related configuration that's trying to use Google accounts

• Explanation: The error indicates an authentication issue with Google accounts, but for basic package building in Wolfi, we only need access to the Wolfi repositories. The fix configures direct access to Wolfi repositories without requiring Google authentication.

• Additional Notes:

• This error is common in presubmit environments where Google Cloud authentication isn't properly configured
• The fix provides a minimal working configuration for package building
• Consider using local development workflows for testing before submitting to CI

• References:

• Wolfi OS documentation: https://github.com/wolfi-dev/os
• Melange documentation: https://github.com/chainguard-dev/melange/blob/main/docs/configuration.md

[octo-sts[bot]]

Gen AI suggestions to solve the build error:

• Detected Error: "patching file libmamba/CMakeLists.txt Hunk #1 FAILED at 445. 1 out of 1 hunk FAILED -- saving rejects to file libmamba/CMakeLists.txt.rej"

• Error Category: Configuration

• Failure Point: Patch application step in the build pipeline

• Root Cause Analysis: The patch "support-shared-libs.patch" is failing to apply cleanly to the CMakeLists.txt file, likely due to changes in the upstream source code that conflict with the patch's expectations.

• Suggested Fix:

1. Update the patch file to match the current source code structure:

   # Generate a new patch from the current source
   git checkout -b patch-update 2024.11.22
   # Make your changes to libmamba/CMakeLists.txt
   git diff > support-shared-libs.patch

2. Alternatively, modify the CMakeLists.txt directly in the pipeline:

   pipeline:
   - uses: git-checkout
   with:
     expected-commit: 282b88b4b8f139cfa660c233807ed6d23a12d064
     repository: https://github.com/mamba-org/mamba
     tag: ${{package.version}}
   
   - runs: |
     sed -i '445i\    LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}' libmamba/CMakeLists.txt
   
   - uses: cmake/configure
   # ... rest of pipeline

• Explanation: The error occurs because line 445 in libmamba/CMakeLists.txt has changed in version 2024.11.22, making the existing patch incompatible. The patch needs to be updated to match the current source code structure. The changelog indicates several changes were made that could have affected the CMake configuration.

• Additional Notes:

• The patch appears to be adding shared library installation directives
• Recent changes in the mamba codebase include build system modifications
• Consider reviewing upstream changes to CMakeLists.txt between versions

• References:

• Upstream commit: https://github.com/mamba-org/mamba/commit/282b88b4b8f139cfa660c233807ed6d23a12d064
• Mamba build documentation: https://mamba.readthedocs.io/en/latest/installation.html#building-from-source

[octo-sts[bot]]

Gen AI suggestions to solve the build error:

Based on the error output, I can provide a specific analysis and solution:

• Detected Error:

Error: rpc error: code = NotFound desc = federate identity: rpc error: code = NotFound desc = no identity found for (https://accounts.google.com, 109346087047205543085)
Error running `chainctl auth token`: exit status 1

• Error Category: Authentication/Configuration

• Failure Point: Pre-build authentication step when accessing Wolfi's presubmit repository

• Root Cause Analysis: The build is failing because it's trying to authenticate with Google accounts for accessing the presubmit repository but lacks proper authentication credentials.

• Suggested Fix:

1. Add a repositories section to the melange YAML:

   environment:
   contents:
   repositories:
     - https://packages.wolfi.dev/os
   packages:
     # existing packages...

2. Remove any chainctl-specific authentication requirements from your local setup

• Explanation: The error indicates an authentication issue with the presubmit repository. By explicitly defining the main Wolfi OS repository and removing the presubmit repository dependency, the build should proceed using the public package repository instead.

• Additional Notes:

• This issue is specific to the CI environment authentication flow
• The fix maintains package availability while bypassing the presubmit authentication requirement
• No functional changes to the package build process are needed

• References:

• Melange documentation on repository configuration: https://github.com/chainguard-dev/melange/blob/main/docs/configuration.md#repositories
• Wolfi OS package repository: https://packages.wolfi.dev/os

The fix should allow the build to proceed while maintaining access to all required packages through the public Wolfi repository.

[octo-sts[bot]]

Gen AI suggestions to solve the build error:

Based on the error output and the Melange YAML file, I'll analyze and provide specific fixes:

• Detected Error: The build appears to fail during the git checkout phase, specifically with the message "git commit for build config not provided"

• Error Category: Version/Configuration

• Failure Point: git-checkout step in the pipeline

• Root Cause Analysis: The build system is unable to verify the git commit hash against the provided tag. This often happens when there's a mismatch between the version tag and commit hash, or when the tag format doesn't match the repository's tag scheme.

• Suggested Fix:

1. Update the version and git reference:

   
   package:
   version: "1.5.8"  # Use the actual tagged version

pipeline:

• uses: git-checkout with: repository: https://github.com/mamba-org/mamba tag: "libmamba-${{package.version}}" # Add prefix if needed expected-commit: "282b88b4b8f139cfa660c233807ed6d23a12d064"

• Explanation: The current version "2024.11.22" doesn't appear to match mamba's versioning scheme. Looking at their repository, they use semantic versioning (e.g., 1.5.8). The tag should match the exact format used in the upstream repository.

• Additional Notes:

• Mamba typically uses semantic versioning
• Their tags often include a prefix (e.g., "libmamba-")
• The commit hash should be verified against the correct tag
• Consider using the latest stable release tag

• References:

• Mamba releases: https://github.com/mamba-org/mamba/releases
• Mamba versioning scheme: https://github.com/mamba-org/mamba/blob/main/CMakeLists.txt

To verify the fix:

1. Check the latest release tag on the mamba repository
2. Update the version to match the tag
3. Verify the commit hash corresponds to that tag
4. Ensure the tag format matches exactly how it appears in the repository

[hbh7]

Updated the patch based on upstream changes and what was in the patch previously.